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AMENDMENTS TO THE CLAIMS 

Please amend the current claims with the following Listing of Claims. This Listing 
will replace all prior versions, and listings, of claims in the application: 

Listing of Claims: 

1. (Currently Amended) A method for automatically negotiating a security 
protocol, comprising: 

receiving a security authorization request to establish a secure connection 
between an internal node having a first protocol set , the internal node being 
internal to a security-enabled domain, and an external node having a second 
protocol set , the external node being external to the security-enabled domain; 

comparing a first protocol set associated with the internal node to a second 
protocol set associated with the external node; and 

determining that the first node and the second node contain two or more 
protocols in common; 

determining a selected protocol from the two or more protocols in 
common; and 

automatically establishing a secure connection between the external node 
and the internal node based on the selected protocol when a matching protocol 
between the first protocol set and the second protocol set is found . 

2. (Original) A method according to claim 1, wherein the external node 
comprises at least one of a computer and a network-enabled wireless device. 
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3. (Original) A method according to claim 1, wherein the internal node 
comprises at least one of a client computer and a server. 

4. (Original) A method according to claim 1, wherein the security-enabled 
domain comprises a distributed directory domain. 

5. (Original) A method according to claim 1, wherein the security-enabled 
domain comprises a certificate-based domain. 

6. (Original) A method according to claim 5, wherein the certificate-based 
domain comprises a Kerberos-enabled domain. 

7. (Original) A method according to claim 6, wherein the matching protocol 
comprises an X.509 certificate. 

8. (Original) A method according to claim 1, wherein the security 
authorization request is generated by the external node. 

9. (Currently Amended) A method according to claim 8, wherein the selected 
protocol is determined based on at least one of a set of criteria, the set of criteria comprising a 
transfer speed and a bit depth of keys wherein the step of receiving the security authorization 
request is executed by the internal node . 

10. (Original) A method according to claim 1, wherein the security 
authorization request is generated by the internal node. 

11. (Original) A method according to claim 10, wherein the step of receiving 
the security authorization request is executed by the external node. 
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12. (Original) A method according to claim 1, further comprising a step of 
terminating the secure connection when a session between the external node and the internal 
node is complete. 

13. (Canceled). 

14. (Original) A method according to claim 1, further comprising a step of 
selecting a protocol to use in establishing the secure connection when a plurality of matching 
protocols are found. 

15. (Original) A method according to claim 1, further comprising a step of 
authenticating at least one of the internal node and the external node. 

16. (Original) A method according to claim 15, wherein the step of 
authenticating comprises communicating a certificate to a certificate authority. 

17. (Currently Amended) A system for automatically negotiating a security 
protocol, comprising: 

an internal node, the internal node being internal to a security-enabled 
domain, the internal node having an associated first protocol set; and 

a negotiation engine, the negotiation engine configured for: 

(1) receiving a security authorization request to establish a secure 
connection between the internal node having a first protocol set 
and an external node being external to the security-enabled 
domain, the external node having a second protocol set, 
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(2) determining that the first protocol set and the second protocol 
set contain two or more protocols in common, 

(3) determining a selected protocol from the two or more protocols 
in common, and 

(4) automatically establishing a secure connection between the 
external node and the internal node based on the selected protocol. 

a negotiation — engine, — the — negotiation — engine receiving — a — security 
authorization request to establish a secure connection between the internal node 
and an external node being external to the security enabled domain and having an 
associated second protocol set, comparing the first protocol set associated with the 
internal node to th e second protocol set associated with the external node, and 
establishing a secure connection between the external node and the internal node 
w r hen a matching protocol between the first protocol set and the second protocol 
set is found . 

18. (Original) A system according to claim 17, wherein the external node 
comprises at least one of a computer and a network-enabled wireless device. 

19. (Currently Amended) A system according to claim 17, wherein the 
selected protocol is determined based on at least one member of a set of criteria, the set of 
criteria comprising a transfer speed and a bit depth of keys, the internal node comprises at least 
one of a client computer and a server . 

20. (Original) A system according to claim 17, wherein the security-enabled 
domain comprises a distributed directory domain. 
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21. (Original) A system according to claim 17, wherein the security-enabled 
domain comprises a certificate-based domain. 

22. (Original) A system according to claim 21, wherein the certificate-based 
domain comprises a Kerberos-enabled domain. 

23. (Original) A system according to claim 22, wherein the matching protocol 
comprises an X.509 certificate. 

24. (Original) A system according to claim 17, wherein the security 
authorization request is generated by the external node. 

25. (Original) A system according to claim 24, wherein the security 
authorization request is received by the internal node. 

26. (Original) A system according to claim 17, wherein the security 
authorization request is generated by the internal node. 

27. (Original) A system according to claim 26, wherein the security 
authorization request is received by the external node. 

28. (Original) A system according to claim 17, wherein the negotiation engine 
terminates the secure connection when a session between the external node and the internal node 
is complete. 

29. (Original) A system according to claim 17, wherein the negotiation engine 
terminates connection processing when no match between the first protocol set and the second 
protocol set is found. 
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30. (Original) A system according to claim 17, wherein the negotiation engine 
selects a protocol to use in establishing the secure connection when a plurality of matching 
protocols are found. 

31. (Original) A system according to claim 17, wherein at least one of the 
internal node and the external node authenticates the other. 

32. (Original) A system according to claim 31, wherein the authenticating 
comprises communicating a certificate to a certificate authority. 

33-48. (Cancelled) 

49. (Currently Amended) One or more tangible computer-readable media 
having computer-executable instructions embodied thereon , the computer-executable instructions 
being configured to execute a method for automatically negotiating a security protocol, the 
method comprising: 

receiving a security authorization request to establish a secure connection 
between an internal node, the internal node being internal to a security-enabled 
domain, and an external node, the external node being external to the security- 
enabled domain; 

comparing a first protocol set associated with the internal node to a second 
protocol set associated with the external node; and 

establishing a secure connection between the external node and the 
internal node when a matching protocol between the first protocol set and the 
second protocol set is found; 
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determining that the first protocol set and the second protocol set contain 
two or more protocols in common; 

determining a selected protocol from the two or more protocols in 
common; and 

automatically establishing a secure connection between the external node 
and the internal node based on the selected protocol . 

50. (Previously Presented) The one or more computer-readable media of claim 
49, wherein the external node comprises at least one of a computer and a network-enabled 
wireless device. 

51. (Previously Presented) The one or more computer-readable media of claim 
49, wherein the internal node comprises at least one of a client computer and a server. 

52. (Previously Presented) The one or more computer-readable media of claim 
49, wherein the security-enabled domain comprises a distributed directory domain. 

53. (Previously Presented) The one or more computer-readable media of claim 
49, wherein the security-enabled domain comprises a certificate -based domain. 

54. (Previously Presented) The one or more computer-readable media of claim 

53, wherein the certificate-based domain comprises a Kerberos-enabled domain. 

55. (Previously Presented) The one or more computer-readable media of claim 

54, wherein the matching protocol comprises an X.509 certificate. 
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56. (Previously Presented) The one or more computer-readable media of claim 
49, wherein the step of generating a security authorization request is executed by the external 
node. 

57. (Previously Presented) The one or more computer-readable media of claim 
56, wherein the step of receiving the security authorization request is executed by the internal 
node. 

58. (Previously Presented) The one or more computer-readable media of claim 
49, wherein the step of generating a security authorization request is executed by the internal 
node. 

59. (Previously Presented) The one or more computer-readable media of claim 
58, wherein the step of receiving the security authorization request is executed by the external 
node. 

60. (Previously Presented) The one or more computer-readable media of claim 
49, wherein the method further comprises a step of terminating the secure connection when a 
session between the external node and the internal node is complete. 

61. (Canceled). 

62. (Previously Presented) The one or more computer-readable media of claim 
49, wherein the method further comprises a step of selecting a protocol to use in establishing the 
secure connection when a plurality of matching protocols are found. 
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